ci: try to mostly adapt workflows

Signed-off-by: Christoph Heiss <christoph@c8h4.io>

.forgejo/workflows/build-flake-info.yml

@@ -12,18 +12,14 @@ on:
 
 jobs:
   build-flake-info:
-    runs-on: ubuntu-latest
+    runs-on: nixos-unstable
     steps:
     - name: Checking out the repository
       uses: actions/checkout@v4
 
-    - name: Setup
+    - name: Enable flakes
-      uses: ./.github/actions/common-setup
+      run: |
-      with:
+        echo 'experimental-features = nix-command flakes' >>/etc/nix/nix.conf
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        CACHIX_SIGNING_KEY: ${{ secrets.CACHIX_SIGNING_KEY }}
-
-
 
     - name: Building flake-info
       run: |

.forgejo/workflows/check-flake-files.yml

@@ -8,24 +8,19 @@ on:
 
 jobs:
   automatic-custom-flakes-check:
-    runs-on: ubuntu-latest
+    runs-on: nixos-unstable
-
     strategy:
       fail-fast: true
-
     env:
       RUST_LOG: debug
 
     steps:
-
     - name: Checking out the repository
       uses: actions/checkout@v4
 
-    - name: Setup
+    - name: Enable flakes
-      uses: ./.github/actions/common-setup
+      run: |
-      with:
+        echo 'experimental-features = nix-command flakes' >>/etc/nix/nix.conf
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        CACHIX_SIGNING_KEY: ${{ secrets.CACHIX_SIGNING_KEY }}
 
     - name: Try importing all custom flakes
       run: |

.forgejo/workflows/frontend.yml

@@ -0,0 +1,30 @@
+name: "Frontend: Build & Deploy to Netlify"
+on:
+  workflow_dispatch:
+  pull_request:
+    paths:
+      - "flake.nix"
+      - "flake.lock"
+      - "frontend/**"
+      - "VERSION"
+
+  push:
+    branches:
+      - main
+
+jobs:
+  build-and-deploy:
+    runs-on: nixos-unstable
+    steps:
+    - name: Checking out the repository
+      uses: actions/checkout@v4
+
+    - name: Enable flakes
+      run: |
+        echo 'experimental-features = nix-command flakes' >>/etc/nix/nix.conf
+
+    - name: Building search.nixos.org
+      run: |
+        nix -vL build .#frontend
+        mkdir ./dist
+        cp -RL ./result/* ./dist/

.forgejo/workflows/import-to-elasticsearch.yml

@@ -10,10 +10,8 @@ permissions:
   issues: write
 
 jobs:
-
   nixos-channels:
-    runs-on: ubuntu-latest
+    runs-on: nixos-unstable
-
     outputs:
       matrix: ${{ steps.nixos-channels.outputs.matrix }}
 
@@ -21,11 +19,9 @@ jobs:
     - name: Checking out the repository
       uses: actions/checkout@v4
 
-    - name: Setup
+    - name: Enable flakes
-      uses: ./.github/actions/common-setup
+      run: |
-      with:
+        echo 'experimental-features = nix-command flakes' >>/etc/nix/nix.conf
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        CACHIX_SIGNING_KEY: ${{ secrets.CACHIX_SIGNING_KEY }}
 
     - name: NixOS Channels
       id: nixos-channels
@@ -37,12 +33,10 @@ jobs:
 
   import-nixpkgs:
     needs: nixos-channels
-    runs-on: ubuntu-latest
+    runs-on: nixos-unstable
-
     strategy:
       fail-fast: false
       matrix: ${{ fromJSON(needs.nixos-channels.outputs.matrix) }}
-
     env:
       RUST_LOG: debug
       FI_ES_EXISTS_STRATEGY: abort
@@ -52,70 +46,52 @@ jobs:
     - name: Checking out the repository
       uses: actions/checkout@v4
 
-    - name: Setup
+    - name: Enable flakes
-      uses: ./.github/actions/common-setup
+      run: |
-      with:
+        echo 'experimental-features = nix-command flakes' >>/etc/nix/nix.conf
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        CACHIX_SIGNING_KEY: ${{ secrets.CACHIX_SIGNING_KEY }}
 
     - name: Import ${{ matrix.channel }} channel
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       run: |
         nix run --accept-flake-config .#flake-info -- --push --elastic-schema-version=$(< VERSION) nixpkgs ${{ matrix.channel }}
-      if: github.repository_owner == 'NixOS'
+      if: false
 
     - name: Warmup ${{ matrix.channel }} channel
       run: |
         for (( i = 0; i < 3; i++ )) do
           curl -sS ${{ secrets.ELASTICSEARCH_URL2 }}/latest-$(< VERSION)-nixos-${{ matrix.channel }}/_search | jq -c '.took // .'
         done
-      if: github.repository_owner == 'NixOS'
+      if: false
-
-    - name: Create issue if failed
-      if: failure()
-      uses: JasonEtco/create-an-issue@v2
-      with:
-        filename: .github/failing-import-issue.md
-        search_existing: open
-        update_existing: false
-      env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        CHANNEL: ${{ matrix.channel }}
 
   import-flakes:
-    runs-on: ubuntu-latest
+    runs-on: nixos-unstable
-
     strategy:
       fail-fast: false
       matrix:
         group:
-          - "manual"
+          - manual
-
     env:
       RUST_LOG: debug
       FI_ES_EXISTS_STRATEGY: recreate
       FI_ES_URL: ${{ secrets.ELASTICSEARCH_URL2 }}
 
     steps:
-
     - name: Checking out the repository
       uses: actions/checkout@v4
 
-    - name: Setup
+    - name: Enable flakes
-      uses: ./.github/actions/common-setup
+      run: |
-      with:
+        echo 'experimental-features = nix-command flakes' >>/etc/nix/nix.conf
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        CACHIX_SIGNING_KEY: ${{ secrets.CACHIX_SIGNING_KEY }}
 
     - name: Import ${{ matrix.group }} group
       run: |
         nix run --accept-flake-config .#flake-info -- --push --elastic-schema-version=$(< ./VERSION) group ./flakes/${{ matrix.group }}.toml ${{ matrix.group }}
-      if: github.repository_owner == 'NixOS'
+      if: false
 
     - name: Warmup ${{ matrix.group }} group
       run: |
         for (( i = 0; i < 3; i++ )) do
           curl -sS ${{ secrets.ELASTICSEARCH_URL2 }}/latest-$(< VERSION)-group-${{ matrix.group }}/_search | jq -c '.took // .'
         done
-      if: github.repository_owner == 'NixOS'
+      if: false

.forgejo/workflows/update-flake-lock.yml

@@ -1,4 +1,5 @@
-name: update-flake-lock
+name: "Update flake.lock"
+
 on:
   workflow_dispatch: # allows manual triggering
   schedule:
@@ -6,14 +7,15 @@ on:
 
 jobs:
   lockfile:
-    runs-on: ubuntu-latest
+    runs-on: nixos-unstable
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
-      - name: Install Nix
+
-        uses: cachix/install-nix-action@V27
+      - name: Enable flakes
-        with:
+        run: |
-          extra_nix_config: |
+          echo 'experimental-features = nix-command flakes' >>/etc/nix/nix.conf
-            access-tokens = github.com=${{ secrets.GITHUB_TOKEN }}
+
       - name: Update flake.lock
         uses: DeterminateSystems/update-flake-lock@v22
+        if: false

.github/actions/common-setup/action.yml

@@ -1,23 +0,0 @@
-name: Setup Environment
-inputs:
-  GITHUB_TOKEN:
-    required: true
-    description: "GitHub access token used to prevent GitHub's rate limit for unauthenticated requests"
-  CACHIX_SIGNING_KEY: # determines what node version to install
-    required: true
-    description: 'Cachix Signing Key'
-runs:
-  using: "composite"
-  steps:
-
-    - name: Installing Nix
-      uses: cachix/install-nix-action@v20
-      with:
-        nix_path: nixpkgs=channel:nixpkgs-unstable
-        extra_nix_config: |
-          access-tokens = github.com=${{ inputs.GITHUB_TOKEN }}
-
-    - uses: cachix/cachix-action@v12
-      with:
-        name: nixos-search
-        signingKey: '${{ inputs.CACHIX_SIGNING_KEY }}'

.github/workflows/frontend.yml

@@ -1,51 +0,0 @@
-name: "Frontend: Build & Deploy to Netlify"
-on:
-  workflow_dispatch:
-  pull_request:
-    paths:
-      - "flake.nix"
-      - "flake.lock"
-      - "frontend/**"
-      - "VERSION"
-
-  push:
-    branches:
-      - main
-
-jobs:
-  build-and-deploy:
-    runs-on: ubuntu-latest
-    steps:
-    - name: Checking out the repository
-      uses: actions/checkout@v4
-
-    - name: Setup
-      uses: ./.github/actions/common-setup
-      with:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        CACHIX_SIGNING_KEY: ${{ secrets.CACHIX_SIGNING_KEY }}
-
-
-
-    - name: Building search.nixos.org
-      run: |
-        nix -vL build .#frontend
-        mkdir ./dist
-        cp -RL ./result/* ./dist/
-
-    - name: Deploy to Netlify
-      uses: nwtgck/actions-netlify@v3.0
-      env:
-        NETLIFY_AUTH_TOKEN: ${{ secrets.NETLIFY_AUTH_TOKEN }}
-        NETLIFY_SITE_ID: ${{ secrets.NETLIFY_SITE_ID }}
-      with:
-        production-branch: 'main'
-        production-deploy: ${{ github.event_name == 'push' }}
-        publish-dir: './dist'
-        github-token: ${{ secrets.GITHUB_TOKEN }}
-        deploy-message: 'Deploy from GitHub Actions'
-        enable-pull-request-comment: true
-        overwrites-pull-request-comment: true
-        enable-commit-comment: false
-        enable-commit-status: true
-      if: github.repository_owner == 'NixOS'